4 ms·

The package in question is libjs-jquery-ui which is in the universe repository. The universe repository is explicitly community supported only and needs to be

The package in question is libjs-jquery-ui which is in the universe repository. The universe repository is explicitly community supported only and needs to be enabled as it's not on by default. Ubuntu Pro promises 10 years of security updates to some of the packages in the universe repo. In Redhat speak, this is like RH supporting some EPEL packages if you have a subscription.

josephcsible 4y ago
I don't think Red Hat has ever said anything like "A known-vulnerable version of this package is free. We did the work of making a security patch for it, but to get that, you have to pay." for any of their releases prior to EOL.
- Caligatio 4y ago
  So Ubuntu offering some support where RH offers no support is worse? To the best of my knowledge, RH won't touch EPEL with a 10 foot pole.
  - josephcsible 4y ago
    > So Ubuntu offering some support where RH offers no support is worse? Which is worse: putting asbestos in everything because you don't know it's harmful yet, or once everyone learns that it is harmful, having a cheap product line that you put asbestos in and an expensive product line that you don't?
    - Caligatio 4y ago
      Open source: if it isn't perfect, don't bother.
    - markshuttle 4y ago
      Emotive analogy, but lets run with it. We've all decided to build with sustainable local materials, which anybody can dig up without harming the environment. That's wonderful! Unfortunately, the materials sometimes turn out to have asbestos in them. Canonical and a large number of friends enjoy digging, and they make those local materials available for free, no digging required, as Ubuntu. So Ubuntu happens to be a free source of pre-dug materials which is popular for lots of reasons. People with big buildings who like using Ubuntu need the asbestos removed if its found, and Canonical has started to do that for them commercially. Canonical have also said they are happy to remove the asbestos for free for small buildings, as long as the big-building people keep funding them to do it. The more big building people choose Canonical to sort out this issue, the better it will be for everyone using Ubuntu, even if they don't do any digging themselves. Seems like a great deal for people with smaller buildings, as long as people with big buildings also think it's a good deal. Since I happy to like helping people with smaller buildings, I think this is all pretty square.

josephcsible 4y ago

I don't think Red Hat has ever said anything like "A known-vulnerable version of this package is free. We did the work of making a security patch for it, but to get that, you have to pay." for any of their releases prior to EOL.

Caligatio 4y ago
So Ubuntu offering some support where RH offers no support is worse? To the best of my knowledge, RH won't touch EPEL with a 10 foot pole.
- josephcsible 4y ago
  > So Ubuntu offering some support where RH offers no support is worse? Which is worse: putting asbestos in everything because you don't know it's harmful yet, or once everyone learns that it is harmful, having a cheap product line that you put asbestos in and an expensive product line that you don't?
  - Caligatio 4y ago
    Open source: if it isn't perfect, don't bother.
  - markshuttle 4y ago
    Emotive analogy, but lets run with it. We've all decided to build with sustainable local materials, which anybody can dig up without harming the environment. That's wonderful! Unfortunately, the materials sometimes turn out to have asbestos in them. Canonical and a large number of friends enjoy digging, and they make those local materials available for free, no digging required, as Ubuntu. So Ubuntu happens to be a free source of pre-dug materials which is popular for lots of reasons. People with big buildings who like using Ubuntu need the asbestos removed if its found, and Canonical has started to do that for them commercially. Canonical have also said they are happy to remove the asbestos for free for small buildings, as long as the big-building people keep funding them to do it. The more big building people choose Canonical to sort out this issue, the better it will be for everyone using Ubuntu, even if they don't do any digging themselves. Seems like a great deal for people with smaller buildings, as long as people with big buildings also think it's a good deal. Since I happy to like helping people with smaller buildings, I think this is all pretty square.